Image Compressor & Optimizer – iLoveIMG, 498c6b23eb82dfde39eea2514682ce6d8b9f67b0
- CVE, Research URL
- Published on
- Nov 14, 2023
- Research Description
- iLoveIMG [iloveimg] < 1.0.6 WordPress iLoveIMG Plugin <= 1.0.5 is vulnerable to PHP Object Injection Update the WordPress iLoveIMG plugin to the latest available version (at least 1.0.6). Unknown discovered and reported this PHP Object Injection vulnerability in WordPress iLoveIMG Plugin. This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more if a proper POP chain is present. This vulnerability has been fixed in version 1.0.6.
- Affected versions
-
max 1.0.6.
- Status
-
vulnerable